Skip to content
OpenAdvisories

Package · npm

style-dictionary

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-54639

    Style Dictionary - Prototype Pollution in convertTokenData utility function

    Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in version 4.3.0 and prior to version 5.4.4. Impact users have: direct usage of `convertTokenData(tokens, { output: 'object' });`; indirect u…

    style-dictionary style-dictionary style-dictionary npm